PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
eab275fd6d01caedb56674d14cf77b7ad361990956c8a84e61891684fa622eb7.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eab275fd6d01caedb56674d14cf77b7ad361990956c8a84e61891684fa622eb7.dll
Resource
win10v2004-20240802-en
Target
eab275fd6d01caedb56674d14cf77b7ad361990956c8a84e61891684fa622eb7
Size
3.5MB
MD5
09f071b7392033a702760d8999abcb2a
SHA1
c71cac43e44a9dc1f784c338b22ae75f9b5beccf
SHA256
eab275fd6d01caedb56674d14cf77b7ad361990956c8a84e61891684fa622eb7
SHA512
99d398806d497d70a6ba4d0f67311726f513cfea382be11dd7255f08df963cfff522010d859308655b9b5174049895fdc9b25be466eb7cdae4376dc65d213f4c
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zL:8QKotcTlBk9YwzEhPbYzjmMtccXk8KX
Checks for missing Authenticode signature.
resource |
---|
eab275fd6d01caedb56674d14cf77b7ad361990956c8a84e61891684fa622eb7 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ